[Opendnssec-develop] Proposal for DS submission hook syntax for the Enforcer

Jakob Schlyter jakob at kirei.se
Fri Mar 5 10:19:20 UTC 2010


I suggest we do something like this:


Index: conf/conf.rnc
===================================================================
--- conf/conf.rnc	(revision 2960)
+++ conf/conf.rnc	(working copy)
@@ -88,7 +88,13 @@
 		element ManualKeyGeneration { empty }?,
 
 		# How long before a KSK Rollover should we start warning (optional)
-		element RolloverNotification { xsd:duration }?
+		element RolloverNotification { xsd:duration }?,
+		
+		# Command to use for submitting new DS records to a parent -
+		# the command should accept DNSKEY RDATA via STDIN
+		#
+		# '%zone' in the string will be replaced by the zone name
+		element DelegationSignerSubmitCommand { xsd:string }?
 	},
 
 	# Configuration parameters for the Signer 


e.g. with eppclient one would use:

	<DelegationSignerSubmitCommand>/usr/local/sbin/eppclient %zone</DelegationSignerSubmitCommand>


makes sense?

	jakob




More information about the Opendnssec-develop mailing list